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In the Claims ; 

The listing of claims will replace all prior versions, and listings, of claims in the 
application. 

Listing of Claims; 

1 . (Currently amended) A method of outputting an alert that an unauthorized event has 
occurred, the method comprising: 

obtaining a status from a sensor; 

retrieving personnel information comprising identity and status information for the 
personnel from a database, the personnel information relating to the sensor; 
generating the alert; 

applying a filter to determine whether to modify a severity of the alert; ^ad 
re-evaluating the severitv of the alert to generate a modified alert severity S^o h when it 
is determined to modify the severity of the alert: and 
outputting the alert; 

wherein S ,.nH - So + (G * N^) + fH * N^^^) - (I * (1 Oft)); 
So is a preset severitv associated with the alert: 
G. H, and I are preset constants: 

Nggmg is a number of alerts in an access zone within a preset time window: 
NaHjgngn t IS ^ numbcr of alerts in access zones adjacent to the access zone within the 
preset time window: and 

C(t) is a certaintv associated with the alert at a time t. 

wherein the status information comprises job category and atithorized access zone 
infomiation. 



2. (Original) The method of claim 1, further comprising retrieving information relating 
to a prior event from the database. 
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3. (Original) The method of claim 1, further comprising accumulating the alert. 

4. (Canceled) 

5. (Original) The method of claim 1, further comprising re-evaluating an uncertainty of 
the alert. 

6. (Original) The method of claim 1, further comprising applying a filter to determine 
whether to limit outputting of the alert. 

7. (Original) The method of claim 1, further comprising outputting a recommendation 
relating to the alert. 

8. (Original) The method of claim 1, wherein obtaining a status from a sensor inchides 
obtaining a status from one of an infi'ared sensor, a physical sensor, a motion detection sensor, 
a wireless sensor, an audio pattern recognition device, a video pattern recognition device, a 
card reader, a biometric sensor, a software monitoring device, a trip wire, an electric eye, a 
pressure sensor, an access panel switch, a door switch, a microwave sensor, and a System 
Network Management Protocol (SNMP) trap/event message. 

9. (Original) The method of claim 1, wherein outputting the alert includes outputting one 
of a telephone message, an electronic message, a pager message, a visual indication, and an 
auditory indication. 

10. (CuiTently amended) A system for outputting an alert, the system comprising: 
a sensor interface; 

a database; and 

an alert processor in communication with the sensor interface and the database, 
wherein the alert processor is configured to retrieve personnel information fi'om the database, 
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generate the alert, apply a filter to determine whether to modify a severity of the alert, and 
output the alert; 

wherein the alert processor includes an alert uncertainty and severity estimation 
module the alert processor being configured to re-evaluate the severity of the alert to generate 
a modified alert severity Smn H when it is determined to modify the severity of the alert; 

wherein the personnel information comprises identity and status infoiination for the 
personnel and is related to the sensor; and 

wherein S. .nH - So + (G * N^^) + (H * N ^^^^ t^ - (I * f 1 ~ C(t)): 

Sn is a preset severity associated with the alert; 

G. H. and I are preset constants: 

Ngn mg is a number of aleits in an access zone within a preset time window; 
N^H j^n^ is a number of alerts in access zones adjacent to the access zone within the 
preset time window; and 

C(t) is a certainty associated with the alert at a time t. 

wherein the status information comprises job category and authorized access zone 
information. ^ 

1 1 . (Original) The system of claim 1 0, wherein the alert processor includes an alert 
generation module. 

12. (Original) The system of claim 10, wherein the alert processor includes an input 
module. 

13. (Original) The system of claim 10, wherein the alert pi'ocessor includes a filter 
module. 



14. (Canceled) 



In re: Jeffrey A, Aaron et al. 
Serial No,: 10/675,517 
Filed: September 30, 2003 
Page 5 

15. (Original) The system of claim 10, wherein the alert processor includes a rule and 
algorithm update module. 

16. (Original) The system of claim 10, wherein the alert processor includes a filter/mode 
selection module. 

17. (Original) The system of claim 10, wherein the alert processor includes an alert output 
module. 

18. (Currently amended) A computer readable medivim having stored thereon instructions 
which, when executed, cause a processor to: 

obtain a status fi^om a sensor; 

retrieve persomiel infomiation comprising identity and status inforaiation for the 
personnel from a database, the personnel information relating to the sensor; 

generate an alei't; 

apply a filter to detennine whether to modify a severity of the alert; and 
re-evaluate the severity of the alert to generate a modified alert severity Smn H when it is 
determined to modify the severity of the alert: and 
output the alert; 

wherein Sn^j - So + TG * N..„..) + (H * N.^i.r..r.r) - (I * (1 - C(t)): 
Sn is a preset severity associated with the alert: 
G, H. and I are preset constants: 

Ng^m g is a number of alerts in an access zone within a preset time window: 
Nndjnneri t is a numbcr of alerts in access zones adjacent to the access zone within the 
preset time window; and 

C(t) is a certainty associated with the alert at a time t. 

wherein th e status infonnation comprises job category and atithorized access zone 
information. 
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19. (Original) The computer readable medium of claim 18, having stored thereon 
additional instructions that cause the processor to obtain a status from one of an infrared 
sensor, a physical sensor, a motion detection sensor, a wireless sensor, an audio pattern 
recognition device, a trip wire, an electronic eye, a pressure sensor, an access panel switch, a 
door switch, a microwave sensor, and a System Network Management Protocol (SNMP) trap 
source/event message. 

20. (Original) The computer readable medium of claim 1 8, having stored thereon 
additional instiuctions that cause the processor to outpvit one of a telephone message, an 
electronic message, a pager message, a visual indication, and an auditory indication. 



